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@ Billing system for computer software. 

(g) A computer software security and billing system is 
disclosed in which the application program is enciphered in 
accordance with an algorithm driven by a numeric key. The 
user s computer is provided with a hardware security module 
and a removable billing module, both of which carry unique 
codes. A security program accesses the applicatipn program 
and also writes information about billing into the billing module. 
The billing module is periodically replaced so llie user can be 
charged based on amount of usage of the software. 
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Description 

BILLING SYSTEM FOR COMPUTER SOFTWARE 



Field of the Invention 

5 The present Invention relates to the field of the marketing of computer software in general, and relates, in 
particular, to a system for securing and/or encoding personal computer software so that it can be marketed to 
the ultimate user on a pay-per-usage arrangement rather than on a fixed fee purchase price. 

Background of the Invention 

10 The personal computer industry has grown enormously in the past decade and has created a large market in 
software suitable for operation of personal computers. Many companies are in the business of creating and 
publishing computer software packages which are then marketed to personal computer owners for use in their 
machines. Typically such computer software packages are marketed on a fixed fee basis in which a user 
purchases a copy of the software, usually under terms of a written license, for a fixed price thereby granting to 

J5 the user perpetual use of the software. It has been a characteristic of this industry that in order for the 
publishers of the software to recover the often quite large investment in research and development of the 
software, and also the costs of manufacture and marketing, that the purchase price of many such software 
items has been relatively high, particularly for limited distribution or special-purpose software. This high 
purchase price has been a barrier, in some circumstances, to the widespread sale of some software and has 

20 limited the penetration of software publishers In some markets. In addition, some users are reluctant to incur 
such a purchase price without first operating the software, since the suitability of software is very difficult to 
judge without actually using it. 

The relatively high purchase price of software has lead to another phenomenon perceived as a problem by 
many software publishers. It is often relatively easy for a personal computer owner to make duplicate copies of 

25 any software which the owner has purchased unless the software is in some fashion protected from such 
copying. It has become quite common for some personal computer owners to make and disseminate such 
copies to their friends and acqijaintances. This often widespread unauthorized copying dilutes the market for 
the software product and may cause the publisher to ask even a higher price for each legitimate copy of the 
product in order to ensure a reasonable amount of return. 

30 One solution to this dilemma has been for manufacturers to institute copy protection schemes which are 
intended to allow media carrying personal computer software to be sold with the media containing technical 
devices intended to ensure that unauthorized copies cannot be made on personal computers. Copy 
protection schemes were put into place by a variety of companies using various techniques. One technique 
was to use a non-standard format for the magnetic disk on which the program was stored, with the 

35 non-standard format not being copyable given the operating system for the personal computer for which the 
program was intended. A second technique which was used was to introduce limited format error or an altered 
physical characteristic into the disk which the computer is unable to duplicate when copying the disk. Special 
commands in the program would then check for that identifying information before allowing operation of any 
programs on the disk and thus to ensure that the disk was not a copy. It has been a more recent trend that a 

40 third category of software protection schemes have been proposed which involve physical protection either by 
making physical variances in the disk which must be checked by the program before it can operate or by 
requiring hardware devices, known as "locks." which must be purchased along with the software in order to 
operate it. All such copy protection schemes have suffered from some disadvantages in that the technique of 
protection of many of the schemes have been deduced by individual computer owners who then widely publish 

45 how the copying protection scheme may be avoided. Certain programs are also sold commercially which 
enable the copying of certain disks which are otherwise intended to be copy protected. Hardware based 
systems can also be avoided by the custom creation of hardware devices which can emulate the lock intended 
to be sold with the system. 

It is also generally known in the prior art that computer programs can be encrypted or encoded so that they 

50 must be used with a special microprocessor or other unique hardware having the capacity to decrypt or 
decode the program. Such systems are limited to the particular encr/ption/decryption system hard-wired into 
the computer and thus are vulnerable to unauthorized use once the methodology of the system is deduced 
once by a user. 

55 Summary of the Invention 

The present invention is summarized in that a billing system for the distribution of personal computer 
software includes a security module which may be installed in the personal computer of the user; a billing 
module which may be installed and removed from the expansion module contained in the computer and which 
contains therein suitable memory location for the writing and reading of billing information: and at least two 

60 programs on a memory media deliverable to the user, one program being a security program and the other 
program being an enciphered application program, the security program serving to interrogate the security 
module and the billing module to determine the codes therefrom, using that information to generate a decipher 
algorithm and using that decipher algorithm to decipher the application program which may then be operated 
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by the persona! computer. 

It is an object of the present invention to provide a security and billing system for personal computers which 
allows users to make an unlimited number of copies of the program without endangering the overall program 
security or the appropriate return of income to the software publisher. 

It is yet another object of the present invention to provide a software dissemination and billing system which 5 
allows for users to obtain access to personal computer software on a pay-per-usage basis so that software 
can be evaluated, tested, and used without a large initial Investment in the software package while still 
ensuring a return of income to the software creators for actual use of the software. 

It is yet another object of the present invention to provide a security system for software distributed in such 
a billing system such that the billing system is extremely difficult to evade. /O 

Other objects, features, and advantages of the present invention will become apparent from the following 
specification when taken in conjunction with the accompanying drawings. 

Description of the Preferred Embodiment 

The invention disclosed herein can be conceptualized as having a minimum basic system for software f5 
security and billing and a series of additional options or features which may be added thereto. The additional 
options and features on this system may either increase the desirability of the system from a commercial 
viewpoint or enhance the security of the system, and may be added individually or In groups to the basic 
system. Some of the options and enhancements are likely to be used in an actual commercial embodiment of 
this invention. However, in order to understand the concept of the present invention most fully, it is first 20 
necessary to understand what the basic core concept contained herein is. Accordingly, it is first necessary to 
examine the simplest possible system constructed in accordance with the present invention. 

A basic coinputer software security and billing system according to the present invention is illustrated by 
the block diagram of Fig. 1 as used in a personal computer. A personal computer, having a central processing 
unit (CPU), resident memory, input/output interfaces, and other related circuitry, is generally indicated at 10 25 
and is otherwise conventional and well-known in the art. The computer CPU and memory unit would normally 
include one or more media on which computer software programs can be stored, typically a disk drive, such as 
that generally indicated at 12 in Fig. 1. White the present invention is particularly described with regard to a 
conventional magnetic disk media currently as is used in personal computers, it is to be understood that it is 
equally applicable to other permanent memor/ media such as magnetic cartridge, optical disk, rem chip. etc. In 30 
the embodiment of Fig. 1. the conventional disk drive 12 may be loaded with an appropriately formatted 
magnetic diskette 14 containing thereon programs to be utilized by the user. The diskette 14 is a conventional 
diskette in its physical make-up, although tne programs carried on it will be somewhat unique as will be 
discussed below. The unique hardware required by the present system is a security module generally 
indicated at 16. The security module 16 is a hard-wired logic circuit elecronicatly attached to the personal 36 
computer 10. The security module 16 may be constructed as an expansion card which can be inserted into the 
chassis of a personal computer having a so-called "open" architecture. The security module may also be a 
stand-alone accessory to the main computer which is attached to the computer by an appropriate serial or 
parallel port. The method of communication, i.e., whether it is parallel or serial, between the main computer and 
the securiy module 16 is unimportant as long as there are address and bi-directional data paths for information 40 
to be transferred between the security module 16 and the personal computer 10. 

Within the security module 16 is located at least one fixed memory device 18. preferably a PROM or 
programmable read-only memory. Other fixed memory devices than a PROM may also be used within the 
scope of the present invention as long as the device used is capable of holding fixed numerica! information of 
the type required here. The PROM 18 in the security module carries thereon a fixed pre-selected numerical 45 
code, referred to here as an internal code. The internal code is unique to each individual security module 16. 
The security module 16 also may carry elsewhere there on it a serial number also unique to the security module 
16. The serial number on the security module 16. which is usually not the same in numerical value as the 
internal code carried in the PROM, is preferably fixed in both electrical form (such as in a PROM or switch 
settings) and in human readable form so that security modules 16 can be matched with appropriate internal 50 
codes. 

Also carried on the security module 16. when it is in use, is a billing module 20. The billing module 20 is a 
removable memory device which can be inserted into a previously provided access interface on the security 
module 16. In other words, the billing module 20 is a removable memory module which can be easily removed 
from and inserted into the security module 16. The billing module 16 must have a memory portion which can be 55 
read by the computer 10 through the security module and written thereon. Accordingly, the exact media of the 
billing module can be varied within the scope of the present invention. Many media can be used for the billing 
module 20 based on magnetic, electronic, optical or even physical data storage technologies. A suitable 
medium might include a paper card having a magnetic memory portion thereon which can be inserted in a 
read/write interface provided on the security module 16. For example, the security module 16 could be a 60 
stand-alone accessory to a personal computer and could have a simple card slot into which a paper card 
carrying a magnetic strip thereon is inserted with the magnetic strip serving as the billing module 20. It is the 
preferred embodiment of the billing module in the present invention, however, that the billing module 20 
consist of an EEPROM. An EEPROM is an electrically alterable and erasable programmable read only memory. 
Preferably the EEPROM billing module 20 is encapsuiized in such a fashion that it is easy to handle by a user 55 
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and is designed to interface with a simple mechanical and electrical interface provided on the security module 
16 into which the billing module 20 can be inserted. 

The billing module 20. of whatever media it is contructed. has at least two portions of memory thereon. The 
first memory portion carries a numerical value referred to here as an external code. The second portion of the 
billing module memory consists of billing memory. The external code is a number designed by the computer to 
be read from the billing module 20. There may be more than one external code and the external code may 
consist of more than one portion or part. The billing memory is intended to store billing information which may 
be data previously loaded onto the billing module 20 or may be a blank area on the billing module 20 onto which 
information may be written. In either event, it is critical to the present invention that the billing memory portion 
of the billing module 20 be alterable by the computer 10 in accordance with information received and 
processed by it. It is therefore also possible that the billing module itself could be embodied in a removable 
magnetic storage media, such as a floppy diskette, which could have an area onto which the external code was 
pre-recorded and a separate portion into which billing information is loaded. 

The application diskette 14 for use within the present invention carries thereon at least one computer 
t5 program which the user desires to operate. This is referred to herein as the -application- program. In 
accordance with the present invention, the application program is enciphered in accordance with an algonthm 
driven by a numerical key. as will be discussed in more detail. The diskette 14 therefore carries the application 
program in its enciphered form. The diskette 14 also carries an unenciphered start program, (n addition, the 
diskette 14 also carries a security program which may or may not be enciphered depending on the level of 
20 redundant security desired in the embodiment of the present invention. If the security program is not 
enciphered, then the start program may merely be a portion of the security program. 

In its operation, the basic system illustrated in Fig. 1 is intended to operate as follows. The computer 10 is 
operated in a normal fashion and the diskette 14 carrying the enciphered application program which the user 
desires to operate is loaded into the computer disk drive 12. As is conventional, the computer CPU loads the 
25 program from a previously designated portion of the diskette 1 4. Carried on that previously designated portion 
of the diskette 14 is the unenciphered start program which is thus loaded into the resident memory m the 
computer 10. The start program then operates. In its most basic embodiment, the first thing that the start 
program does is verify the presence of the security module carrying an active billing module in it. The start 
program also verifies from the billing module that the user stilt has billing credit to operate the program before 
30 it will proceed. Assuming that the billing module is present, and billing credit is available to the user, the 
security program is run. The security program reads the external code from the billing module 20. This code 
sen/es as a "key" to a previously selected algorithm utilized by the security program. No single particular 
algorithm is to be used for the enciphering and deciphering of all application programs. In fact, it is intended 
that different algorithms be used on different diskettes 14, as long as the security program on any diskette 
35 corresponds to the algorithm used to encipher the application program on the diskette. Each algorithm so 
used is preferably based on a numeric key so that the same key must be available to decipher the program as 
was used to encipher it, although it would also be possible to use a two key system in which the encoding key 
is different from the decoding key. Thus the algorithm used by the security program is the inverse of the 
algorithm used to encipher the application program. The security program uses the key from the external code 
40 to operate a deciphering algorithm to decipher the enciphered application program. The security program may 
decipher the entire application program, or may only decipher one or more modules of the application program 
which are to be used by the user at one time, or may decipher only a small number of very important program 
instructions addresses or locations. The security program may also shift a small number of mislocated 
instructions. 

45 The security program then turns over execution to the application program which thereby proceeds to 
execute for the user. 

As the application program executes, the security program periodically monitors application program 
execution. This can be done by formatting the application program as a routine called by the security program 
with program execution periodically returned to the security program or alternatively may be accomplished 

50 through one or more interrupts by which the security program interrupts operation of the application program. 
In any event, during this periodic process, the security program verifies continued use of the application 
program within the computer, and assuming that use is continuing, the security program then creates billing 
data based on program usage. The billing data is stored on the diskette 14 at very frequent intervals and is then 
periodically written into the billing information area of the billing module 20. There are generally two 

55 approaches for entering bitting information in the billing module 20. In one approach, the billing memory of the 
billing module 20 is provided with a pre-established authorization of a certain amount which is loaded into the 
billing memory of the billing module 20 before it is supplied to the user. In this variation, the security program 
would then decrease, or decrement, the value of the billing credit authorization contained in the billing memory 
as use of the application program continued. In the second approach in which credit is extended to the user. 

60 the security program would note when the application program execution continues, and write information 
onto the billing memory indicating usage by the user. This approach would be to increment the billing memory 
by adding additional information thereto. Regardless of whether a decremental or incremental system is used 
conveying billing information to the billing memory, the billing can be done on a time basis or can alternatively 
be done by monitoring any type of operation by the application program, such as disk access or reloading of 

65 different modules, which is generally indicative of the amount of use of the application program which is being 
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mndn G 20 usually bv mail to Ihe dealer or billing center for additional usage authorization when the l.m.t set m 
r K mndu 1 20 iTrea^^^^^ Alternatively the billing modules 20 could be read and reloaded v,a modern 

oo' p'lhus usS could b Charged on^'or the usage they make of the software. In addition, since .he ,0 
rZ JVn be Changed periodically permanent breach of the security of the system is unlikely. 

syalem Ihe user eanpurerasaap u „„dula 20 home, ahd lakes the program d.»R U 

LSeredToTiich w b^r^d'a ^ home -^Ih h?m ahd opera.es ,he program a, he desires. ;he user 
: : ed, ,hf aroon. o ."Iho'ri.a.ion cohUirred ,h ,he bi.ing module, program " " '"J,";' „ 

^^^^^^^^^^^^^^^ 

fad^s=-g-r;irm':r^^^^^^^^^^^ 

he user or hts use. Under such a system, the billing module would be replaced P«."°*^^''y ''^ ' .?r hT ma ' 
J^ically on some kind of fixed time period basis, such as monthly. The '^^^^^^^^^^^^^^^^^ 

; 1 -I .ho hiiiinn mr.fi.ilP consists of an EEPROM. which can easily be mailed to the supplier and DacK lo 
particularly If the b l^g modu e cons^^^^^ ■ ^ ^ ^^^^^^ ^.^ ^^^^^^ ^^^.her alternative is 

as longTs ml a^iroprLely enc^pted algorithm is used with the appropriate de-encrypting security program 63 
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d slTs J P.S. l.h Po,h ,h, =nc*h.™d eSs,«g o, ,he cod., and 

irrpTp^.! -i^^^^^^^^^^^^ »r.",p ...pca. .depe„d.p, ..c.p„p. 
S7.r,?p::p:^^ n^^^^ 

deciphering an application program^ Th.s ^ examp e uses ^ ^^^^^.^^ 

comEiex algorithm methodology and '^^'^^^^^l^l^^.X^^ or ' ^^^^^^ P^°^^^"^^ °'-"\''''n « 
AS is made clear from the discussion v ("^^^f ^^^^i^er key. The enciphering key is chosen at 

invention is driven by a numerical -^^^-^trenc reredprfgrlm. Therefor 

random and used in the algorithm to ^^^^'^ '^.^.^"^^^^^erin^^^^^^ corresponding to the enciphering key used 
procedure is to derive or create the -PPJ^P"^ ^^^^^"^^^'^""Ly th^ security program would read the code 
for the program in question. To develop the .^^cipiier ng Key._ external code. This external code 

?o nlaine'd in the billing module 20 ^V^-J-^.^d tt^eVnO^^^ permanently mounted in the security 
would then be added to the internal J°"^^;"3^f;';i ^y the disk code which would be resident on the 
module 15. These two codes would system. Since the enciphering key was chosen 

applications diskette 14 which ,s desired to be operated by^^^^ external code 

at random, and since the internal ^^.""^Td^con ta^^^^^^^ 

contained in the billing module 20 and '-^.f ,'^'^^;°^^;3°S3 ,he appropriate deciphering key. In the example 

t:S:iSS^^^^^^ -es may simp, be added through normal 

binary addition as follows. 

External Code ^0^° 
Internal Code 1°°^ 
Disk code _±10iH 
DecipViering Key 101001 

deciphering algorithm. Obviously the length of '^^^^^°°^^J,^\e4ect to each other. 

of the various three code components "^^J.^^'^l^J^^,^^^^^^ ,he deciphering key may then be used to 
once the deciphering key has ^een derwed using th^ pr^^ repetitively and applied to the enciphered 

decipher the program in segments. The deciphering key is us v. ^^^^ ^^^^ ^.^^ 

rira=-rsr^^^ 

enciphered program text. That procedure wou y 

Enciphered Progratn Text lOlHO 010101 

Repeating Deciphering Key __J:101001^20i°Oi 

Deciphered Program Text [13010111 lHHO. 

The numeral in brackets above. [l^'inadeStrrJ^on of computer memoir to whic^ 
The deciphered program text would ^^^^^^^^ '^^^^^ P^^'^^'^y p.^gram. The deciphered application program 
^ program can be transfered in an ^PP^^P '^^^^^'^'P'^^'^^.^ted by the computer during the application program^ 
text would constitute the actual instructions to °P«JJ'«^^^^^^^^ ^^^^ be the ->'e^3e procedure -n 

Sc^the^ipS aror^e=.-m^r unencumbered program text to create the enciphered 

-;-oTe ration o, the procedure oMhe pres^^^^^ 

enciphering the disk code as well. ' key in deciphering the disk code itself. Then the disk code 

be added to create a code that would be "SJ"!^^ '"J;,^ ^^e deciphering key for the program text itself, 
would be added to the internal and ^-^^^^^ ^^^^^^^^'r he operation of the software, such as program 
It is also possible that certain ^^^°'^^''\^^^tZclous within the address itself, or as to the relative 
addresses or the locations of --^'^^^^^l^'^^^XZ ^^^ be individually enciphered. In fact, if such 
location of information on certain sectors of the noppyd's-^^ i, may be possible to encipher them within 
addressesareconlainedwithinthe text o the actual progr^ ^y^ ^^P^^ ^,i6r^ss^.^ 
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reverse procedure in which the er^tire program text is first deciphered and then ir^dividual predetermined key 

''^i:^^Z^i:Xor:!iZ "th'orgt^^rS ,h. deciphering key and tor deciphering the 
r^n Text can l^e varied enormously. While arithmetic or algebraic algorithms are preferred other 

fh^ terr^^Soher^Tas used here is not limited just to encoding of letters, terms or character sequences 

msmmmm 

„h.,=bv ''''^''•'^^ S'^iVi ma^^^^^^^ occur, ,nd ,h., ,he ,.,ch cde Is 

Mice, Ih.. ih» «™ion o, "^S^?^ 
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' ioca ed instructions as part of the -'^-'^^^"''I'^f^^^^^^^^^ the location and relocation of those 

p ogram. If this option is used within the structure o t^e P^es^n' ^^.^^ „iH^ed '0 9^"^^^'^^^ 

Socated instructions is '^^-'^f^^ ''/^^ aclrprog am tnst^ If this option is u*"'-^ J'^^ 

key which determines the placement of the misplaced p g ^^^^^^^^ ^^^^ "'"'Tran 

,0 present invention, a program step 48 ,s "^"=;/37^3^„, ^g^nory so that the applicat.on program can 

rnstructions and to relocate them in P^^P^^^, ^^^^7;,;-; ^tj'feature withYn the present invention the program 
properly execute. Also as an ^^d'tional opUonal secu y ^^^^.^^^ ,^ ^p^.a.ng system or other 

would remove disable 'nstrucnons and add copy P^^^ ^^^^^^ disruption, of the "P^^^ ^l'*^."^ 

resident instructions contained .n the P^^^^^' "''"Ph A related procedure may be implemented at 52 .n 

'::^tiX^^ dere;==—rs ^appropriate, then the program stops e.ecut.ng 
^nhe user does operate the svs.e. correc^^the appH^^^^^^^^^^ 

application program is executing, it is still necessary fo the sec^^ y p g ^^^^^ ^^^p 

program ex'e cution and to monitor its ^^V^-^^^" J^^^':, e^en^could be done by simple counting ..me o 
measure usage of the application program. ^"^^^"^^^""'^^^^ ^^^^ through measurement of certa.n loops 
operation of the application program "^^^"^^^f^^^umb^^^^^^^^ 

through program operation o-- "measurement of the number o app„cation program itself. At periodic 

s^ ategy of the application program publisher and on the P^ P^^^^^^^P'^^^, p^^sed, the security program 
nteSs, When it is determined that a^^PP^^P^'^'l-'f^^p.^^ron program usage information on the diskette 
wou7d then proceed to step 60 at which it ^ng i onto the diskette, or hard disk 

1 4 on which the application program is c^r^'ed _Th s wnt^^^^^^ ^^^^^^^ ^^^3 3 ^,„^le. At 

if a hard disk is utilized, should be done relatively frequenUy^per ap y compared to records 

he same time, it is preferable 

esident in memory to ensure that there has been no altema, o ^formation on the system. At a 

he coripu.er was turned off or if an -"^P* ^^^^^.^^'r^Ctes to a half hour of elapsed time, the security 
onqer periodic basis, perhaps at intervals of ''"^f " ^'^^^^^ billing module 20 itself at step 62. This 
' rograr^ would then have to write "^dTreceive additive information, then the program 

Wo^mation could be done in two ways. If t*^^ billing "^""^^^^^^^^^^ portion thereof. If the billing modu^ -s 
would write affirmative data onto the billing rr^odule in '^^^ ^^'^"^9 ^^^^ „om that authorization would be 

provided with a pre-set amount of '^^^^^^ c^^dit allowable to the user. The program would 

made leaving a new balance -Wet. represents t^ ernair^ ng c^ ^^^^^ .^^ '"^T'! ' ^ 

,,en test for billing authomy to determ neth^^^^^^^ ^^^^ ,^ ,,,hori,y does exist, then 

Vceed u-yer.;nated^b^ the use. ^^^^^ ^^.^^ 

It may be desirable to enhance the ^^^unty of the transfer o ^^^^ t^ age 

the usage data is in computer ^-0, a c^^^^^^^^^ t,3„ ^,tten to disk. Data transfer between 

rdisJ rdrS ^mod^c^n be'si-lar. P--^ ^ c ^^^^^^^ 

n^Slption Within the present system is . inse. ^J^^;;::^-: 
encoded numericat values, which could be J^JJ^f ^^'^^pl °,alidation number is resident in the billing 

U. The system would then always '° ^.^J^t^.^^^^o JnLToHzed interruption of the system has occurred 

module at various times in the program to ^n^^re that no u ^^^^.^ ^ ^^y,a^x\on number which can be 

or improper usage thereof. For example, each b'l'ing/"oduie g ^.^^^^ 33^e or next 

de "ed from the next-precedent validation --^^^;^;",;^.,3";^,:y;,ed%lthough this level of security may be 
validation number, use of an unauthorized ,^'"'"9 "^°^ule is P^eve ^^^^ ^ ^^^^^^^ ^^^^^^^ „3 

seen as redundant. Alternatively, the validation "^":'^ber could be gene ^^Mai^on nunr,ber 

o ensure that the bitting module is changed P-^J^-;,^-,^^^ from the billing modu e to 

,0 function is that the validation "^-^ber^^^n enaphe^edjo rn. ^^^^ ^ .3 ,3 ^ 0- 

the disk containing the application program. When the b.mng ^^^^^^ j^^m the previous billing 
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nnodule and the EEPROM in the b.lhng module. The^^^^^ ^ ^^.^ microprocessor or the d.sk. The 

and deciphering data transfers ''^'-7" 'l'^^^^^^^^ key. through a unique routine carried n 

security module microprocessor would 9.^"^^/^,,."\^^^dule The program usage or billing informat.on would 

could service more than one personal 7"^P^'^^^^° , ^^^l^,^ u would be possible for a single Processor, 
nersonal computers connected -n a ^ °' of the computers on the network to read off the 

Sgna.ed a billing concentrator. .0 poll the ^' -^jodules o the comp^^^^^^^ ^^^^^ communicate bill.ng 

billing information from each node '^.^/y^^^^^^,, 'J^.i^g authority. For this option to be effec ive^ 
information, perhaps by rr^^dem w.th J^^'^^^^^^^ll^^^^^, ^e able to communicate with the b.lhng 
microprocessors are necessary .n the secur y 

concentrator. . = no. confined to the particular construction and arrangement of parts 



10 



15 



following claims. 



20 



, . .„.ng system for bill.ng users on a usage basis for an application software for a digital computer 
^T=vable billing module including a memo^ portion carrying an external code therein and a 
memo-VPortiondedicatedforbillinginformat-on^ ^^^^^^ ^^^.^^ carrying both an 

a storage medium carrying programs for he ^omp ^^^^ security program including 

unenciphered security program and an enciphered ^PP''^^^ ^ P °9 ^^^^ and use that external code to 30 
functional means both for causing ^^m fo iecTphe the appHca program for use if the decipher 
generate a decipher key to drive ^ "^.^ '"^J^^^^ ^^e bilHng module. 

^ey is proper, and also ^nrer^'^^r^o^^^^ ^ ^J^.^ ^^,^^,3, „ computer 

2 A billing system as claimed in Claim 1 wnere _ module to the computer, 

and receiving the billing module therein '^'"•^.^^^^'.'^^.fj^S program will not decipher the application 35 

3. A billing system as claimed in ^la- wHe^^e.nJhe^sec^^^^^ .^^^^^^^^^ ,^,,^,,,3 „e 
nroqram if the memory portion ot me omiuy 

user does not have authorization for add,t|onalusag^^^^^ pre-estabiished billing authorization amour^t is 

4. A billing system as claimed -n Cla-m 3 wherein a p ^ ^^^^^^^ ^^^^^^ billing 
written into the billing module before delivery »° ^^^^^.^^^^'-.g^^ the application program. ^0 
7.Zl^oa by decrementing ^rl a pre S '-'^ - '^^'^^ °' ^ 

5. A billing system as claimed '"C'^'^ ^ .^^fj^'^^^ ^ ,ting information is fixed and wherein the secu ity 

n^rb-^g^v-^te^n^a:!^^^^^^^ " 

on?or 'lSred1um^r:^hi:h?;r^ P-odLly transfers a summa. of cumulative 

billing information into the b'lUng module. medium is a magnetic disk. 

9. A billing systehi as claimed ,n Claim 1 wherein the sto^ ^.^^ ^p^^.^,^ ^^^^ 'd^""*^ 

10. A billing system as claimed ^'^'^J.^^^'J^^" 3 to each 
information not apparent to the j^^^.^^"^^!,"^;;;' f,";^''^"^^^ copies were made, 

disk can be traced to the °^'S'"^' ^"'^.'^''^tr^n ^he Enciphering of the application program includes 
eir^le^s^ crars S^ern^'prSam in^ manner determined by the algorithm and 

relocating of instructions or data in me pruy 

s;rsrr p?,::^-f.:^f^r^ .... .... 
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been proper.y updated. , ,,,3 uans.er between ,he billing module and .he 

billing module and controlUng nleract.o computers 

. Wrdware securll, module J^^^J ^^^^^^ c...,i-.g a bKin, •'"■•?,^",„, ,„„„c.., 

therein with a fixed computer-readable nu enciptiered 
'stored in the alterable memory, and ^ ^ ^^curity P'^^'^'^^^^^ZZTTer.^^ 

decipher the aPP«f P'"^"!^ ' jp ,he billing module. : ^^(,,1 authorization 

information in the alterable memory, n me b 9 ^^..^^ity P^°9^^"" ^f^^^" ^J^n the security 

19. A billing system as '^'^"^^"^'"^^ 3 deciphering the application program wh^erem 

23. A billing system as claimed ^^^'^^IX presented to it and wherein the security program g 

26. A billing system as claimed in Clam ^= ^^^^ ^^„„, p,„g,am Id gsnerale 

m„s, be combined wilb me inlern.l and , spedlic disk ldenl«,.n9 

1'. . billing .,s.em as Xi:;SS:;^.;:ZZXS^^'^^^''"''-^'°' 
i„,„,ma.lon no. '^/''f"^''£^^:TJTmu ,h, '"'■'•fr.'Xlton p-ogi.m Incldde. 

tr/rn;'s:f.ra?^Sio,aim^^^ 

relocating ollnsLoctlons o. daia in ine p g . v.lld.llon number 

1S*rbS system a. ^^^-S^^^"^^^'"' ""''^ 

from the billing module and g^^^^ij be permitted. ^^^,3 check 

irrbSiinrs-JSTcSST^^^^^^^^^^ 

da,a ,r.ns„r bet..,n .e billing module and ,b, 

Sm"Sr.;1l«r; r ^ „ ocn,lg..d ,0, plural comp.ets 

34. A billing system as claimed in Claim 
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connected *n an inter-communica.ing networ. and there is a single billing -nodule which communicates 
^,h the security modules in each of the computers -n the network. 
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